[*] Binary protection state of ubirsvol
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ubirsvol
11770: e3a03016 mov r3, #22
11774: e5803000 str r3, [r0]
11778: e3e00000 mvn r0, #0
1177c: e28dd01c add sp, sp, #28
11780: e8bd8030 pop {r4, r5, pc}
11784: 000250e0 andeq r5, r2, r0, ror #1
11788: 0001445e andeq r4, r1, lr, asr r4
1178c: 0001452a andeq r4, r1, sl, lsr #10
11790: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11794: e28db014 add fp, sp, #20
11798: e1a06001 mov r6, r1
1179c: e1a04002 mov r4, r2
117a0: e1a05000 mov r5, r0
117a4: ebfffce4 bl 10b3c <strlen@plt>
117a8: e1a02006 mov r2, r6
117ac: e1a01005 mov r1, r5
117b0: e2800039 add r0, r0, #57 ; 0x39
117b4: e3c00007 bic r0, r0, #7
117b8: e04dd000 sub sp, sp, r0
117bc: e1a0000d mov r0, sp
117c0: ebfffcd4 bl 10b18 <sprintf@plt>
117c4: e1a01004 mov r1, r4
117c8: e1a0000d mov r0, sp
117cc: ebffffd2 bl 1171c <free@plt+0xb98>
117d0: e24bd014 sub sp, fp, #20
117d4: e8bd88f0 pop {r4, r5, r6, r7, fp, pc}
117d8: e92d48f0 push {r4, r5, r6, r7, fp, lr}
117dc: e28db014 add fp, sp, #20
117e0: e1a06001 mov r6, r1
117e4: e1a07002 mov r7, r2
117e8: e1a04003 mov r4, r3
117ec: e1a05000 mov r5, r0
117f0: ebfffcd1 bl 10b3c <strlen@plt>
117f4: e1a03007 mov r3, r7
117f8: e1a02006 mov r2, r6
117fc: e1a01005 mov r1, r5
11800: e280006b add r0, r0, #107 ; 0x6b
11804: e3c00007 bic r0, r0, #7
11808: e04dd000 sub sp, sp, r0
1180c: e1a0000d mov r0, sp
11810: ebfffcc0 bl 10b18 <sprintf@plt>
11814: e1a01004 mov r1, r4
11818: e1a0000d mov r0, sp
--
11c64: eaffffe8 b 11c0c <free@plt+0x1088>
11c68: 00014638 andeq r4, r1, r8, lsr r6
11c6c: 0001445e andeq r4, r1, lr, asr r4
11c70: 0001463f andeq r4, r1, pc, lsr r6
11c74: 000250e0 andeq r5, r2, r0, ror #1
11c78: 00014672 andeq r4, r1, r2, ror r6
11c7c: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11c80: e5904000 ldr r4, [r0]
11c84: e28db014 add fp, sp, #20
11c88: e1a00004 mov r0, r4
11c8c: e1a06003 mov r6, r3
11c90: e1a07001 mov r7, r1
11c94: e1a05002 mov r5, r2
11c98: ebfffba7 bl 10b3c <strlen@plt>
11c9c: e1a02007 mov r2, r7
11ca0: e1a01004 mov r1, r4
11ca4: e2800039 add r0, r0, #57 ; 0x39
11ca8: e3c00007 bic r0, r0, #7
11cac: e04dd000 sub sp, sp, r0
11cb0: e1a0000d mov r0, sp
11cb4: ebfffb97 bl 10b18 <sprintf@plt>
11cb8: e1a02006 mov r2, r6
11cbc: e1a01005 mov r1, r5
--
127bc: e59f20c0 ldr r2, [pc, #192] ; 12884 <free@plt+0x1d00>
127c0: e59f10d0 ldr r1, [pc, #208] ; 12898 <free@plt+0x1d14>
127c4: e5900000 ldr r0, [r0]
127c8: ebfff8a5 bl 10a64 <fprintf@plt>
127cc: ebfff8d4 bl 10b24 <__errno_location@plt>
127d0: e3a03013 mov r3, #19
127d4: eaffffcd b 12710 <free@plt+0x1b8c>
127d8: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
127dc: e1530009 cmp r3, r9
127e0: 1affffed bne 1279c <free@plt+0x1c18>
127e4: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
127e8: e1540003 cmp r4, r3
127ec: caffffee bgt 127ac <free@plt+0x1c28>
127f0: e3570000 cmp r7, #0
127f4: 03a00001 moveq r0, #1
127f8: 0affffb6 beq 126d8 <free@plt+0x1b54>
127fc: e2473001 sub r3, r7, #1
12800: e1a02004 mov r2, r4
12804: e5961040 ldr r1, [r6, #64] ; 0x40
12808: e1a00008 mov r0, r8
1280c: ebfff8c1 bl 10b18 <sprintf@plt>
12810: e3a01000 mov r1, #0
12814: e1a00008 mov r0, r8
--
12c3c: ebfff75e bl 109bc <ioctl@plt>
12c40: e2900000 adds r0, r0, #0
12c44: 13a00001 movne r0, #1
12c48: e2600000 rsb r0, r0, #0
12c4c: e28dd014 add sp, sp, #20
12c50: e49df004 pop {pc} ; (ldr pc, [sp], #4)
12c54: 40044f02 andmi r4, r4, r2, lsl #30
12c58: e92d4830 push {r4, r5, fp, lr}
12c5c: e28db00c add fp, sp, #12
12c60: e24dd068 sub sp, sp, #104 ; 0x68
12c64: e5904010 ldr r4, [r0, #16]
12c68: e1a05001 mov r5, r1
12c6c: e1a00004 mov r0, r4
12c70: ebfff7b1 bl 10b3c <strlen@plt>
12c74: e1a02005 mov r2, r5
12c78: e1a01004 mov r1, r4
12c7c: e2800039 add r0, r0, #57 ; 0x39
12c80: e3c00007 bic r0, r0, #7
12c84: e04dd000 sub sp, sp, r0
12c88: e1a0000d mov r0, sp
12c8c: ebfff7a1 bl 10b18 <sprintf@plt>
12c90: e24b1074 sub r1, fp, #116 ; 0x74
12c94: e1a0000d mov r0, sp
--
12f04: ebfffa21 bl 11790 <free@plt+0xc0c>
12f08: e3500000 cmp r0, #0
12f0c: 1affff77 bne 12cf0 <free@plt+0x216c>
12f10: e2842048 add r2, r4, #72 ; 0x48
12f14: e1a01006 mov r1, r6
12f18: e5950030 ldr r0, [r5, #48] ; 0x30
12f1c: ebfffa1b bl 11790 <free@plt+0xc0c>
12f20: e3500000 cmp r0, #0
12f24: 1affff71 bne 12cf0 <free@plt+0x216c>
12f28: e595802c ldr r8, [r5, #44] ; 0x2c
12f2c: e1a0900d mov r9, sp
12f30: e1a00008 mov r0, r8
12f34: ebfff700 bl 10b3c <strlen@plt>
12f38: e1a02006 mov r2, r6
12f3c: e1a01008 mov r1, r8
12f40: e2800039 add r0, r0, #57 ; 0x39
12f44: e3c00007 bic r0, r0, #7
12f48: e04dd000 sub sp, sp, r0
12f4c: e28d7008 add r7, sp, #8
12f50: e1a00007 mov r0, r7
12f54: ebfff6ef bl 10b18 <sprintf@plt>
12f58: e2841040 add r1, r4, #64 ; 0x40
12f5c: e1a00007 mov r0, r7
--
131e4: e1a05001 mov r5, r1
131e8: e1a06002 mov r6, r2
131ec: e3a01000 mov r1, #0
131f0: e3a020b0 mov r2, #176 ; 0xb0
131f4: e1a07000 mov r7, r0
131f8: e1a00009 mov r0, r9
131fc: e1a04003 mov r4, r3
13200: ebfff635 bl 10adc <emset@plt>
13204: e597a048 ldr sl, [r7, #72] ; 0x48
13208: e8840060 stm r4, {r5, r6}
1320c: e1a0000a mov r0, sl
13210: ebfff649 bl 10b3c <strlen@plt>
13214: e1a0800d mov r8, sp
13218: e1a03006 mov r3, r6
1321c: e1a02005 mov r2, r5
13220: e1a0100a mov r1, sl
13224: e280006b add r0, r0, #107 ; 0x6b
13228: e3c00007 bic r0, r0, #7
1322c: e04dd000 sub sp, sp, r0
13230: e1a0000d mov r0, sp
13234: ebfff637 bl 10b18 <sprintf@plt>
13238: e1a0000d mov r0, sp
1323c: e284200c add r2, r4, #12
13240: e1a01009 mov r1, r9
13244: ebfffa56 bl 11ba4 <free@plt+0x1020>
13248: e1a0d008 mov sp, r8
1324c: e3500000 cmp r0, #0
13250: 0a000003 beq 13264 <free@plt+0x26e0>
13254: e3e08000 mvn r8, #0
13258: e1a00008 mov r0, r8
1325c: e24bd020 sub sp, fp, #32
13260: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
13264: e5979044 ldr r9, [r7, #68] ; 0x44
13268: e1a00009 mov r0, r9
1326c: ebfff632 bl 10b3c <strlen@plt>
13270: e1a03006 mov r3, r6
13274: e1a02005 mov r2, r5
13278: e1a01009 mov r1, r9
1327c: e280006b add r0, r0, #107 ; 0x6b
13280: e3c00007 bic r0, r0, #7
13284: e04dd000 sub sp, sp, r0
13288: e1a0000d mov r0, sp
1328c: ebfff621 bl 10b18 <sprintf@plt>
13290: e1a0000d mov r0, sp
13294: e3a02032 mov r2, #50 ; 0x32
--
132e0: e3a03003 mov r3, #3
132e4: e5843010 str r3, [r4, #16]
132e8: e1a02006 mov r2, r6
132ec: e2843014 add r3, r4, #20
132f0: e1a01005 mov r1, r5
132f4: e597004c ldr r0, [r7, #76] ; 0x4c
132f8: ebfff936 bl 117d8 <free@plt+0xc54>
132fc: e3500000 cmp r0, #0
13300: 1affffd3 bne 13254 <free@plt+0x26d0>
13304: e5978050 ldr r8, [r7, #80] ; 0x50
13308: e1a0900d mov r9, sp
1330c: e1a00008 mov r0, r8
13310: ebfff609 bl 10b3c <strlen@plt>
13314: e1a03006 mov r3, r6
13318: e1a02005 mov r2, r5
1331c: e1a01008 mov r1, r8
13320: e280006b add r0, r0, #107 ; 0x6b
13324: e3c00007 bic r0, r0, #7
13328: e04dd000 sub sp, sp, r0
1332c: e1a0000d mov r0, sp
13330: ebfff5f8 bl 10b18 <sprintf@plt>
13334: e1a0000d mov r0, sp
13338: e2841018 add r1, r4, #24
--
13388: e1a02006 mov r2, r6
1338c: e1a01005 mov r1, r5
13390: e597005c ldr r0, [r7, #92] ; 0x5c
13394: ebfff90f bl 117d8 <free@plt+0xc54>
13398: e2508000 subs r8, r0, #0
1339c: 1affffac bne 13254 <free@plt+0x26d0>
133a0: e5941028 ldr r1, [r4, #40] ; 0x28
133a4: e594002c ldr r0, [r4, #44] ; 0x2c
133a8: e5977060 ldr r7, [r7, #96] ; 0x60
133ac: e0c32190 smull r2, r3, r0, r1
133b0: e1a00007 mov r0, r7
133b4: e1c422f0 strd r2, [r4, #32]
133b8: ebfff5df bl 10b3c <strlen@plt>
133bc: e1a03006 mov r3, r6
133c0: e1a02005 mov r2, r5
133c4: e1a01007 mov r1, r7
133c8: e280006b add r0, r0, #107 ; 0x6b
133cc: e3c00007 bic r0, r0, #7
133d0: e04dd000 sub sp, sp, r0
133d4: e1a0000d mov r0, sp
133d8: ebfff5ce bl 10b18 <sprintf@plt>
133dc: e1a0000d mov r0, sp
133e0: e3a02081 mov r2, #129 ; 0x81
--
135fc: 0a000004 beq 13614 <free@plt+0x2a90>
13600: e5963000 ldr r3, [r6]
13604: e3530002 cmp r3, #2
13608: 1affffca bne 13538 <free@plt+0x29b4>
1360c: e2844001 add r4, r4, #1
13610: eafffff0 b 135d8 <free@plt+0x2a54>
13614: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
13618: e15a0003 cmp sl, r3
1361c: 1afffffa bne 1360c <free@plt+0x2a88>
13620: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
13624: e1540003 cmp r4, r3
13628: c3a03013 movgt r3, #19
1362c: c5863000 strgt r3, [r6]
13630: caffffc0 bgt 13538 <free@plt+0x29b4>
13634: e51b30bc ldr r3, [fp, #-188] ; 0xffffff44
13638: e1a02004 mov r2, r4
1363c: e2438001 sub r8, r3, #1
13640: e1a03008 mov r3, r8
13644: e5951040 ldr r1, [r5, #64] ; 0x40
13648: e1a00007 mov r0, r7
1364c: ebfff531 bl 10b18 <sprintf@plt>
13650: e3a01000 mov r1, #0
13654: e1a00007 mov r0, r7
[*] Function sprintf used 11 times ubirsvol